76 matches found
USN-2556-1: Oxide vulnerabilities
It was discovered that Chromium did not properly handle the interaction of IPC, the gamepad API and V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the program...
Apple Mac OS X Multiple Vulnerabilities -01 (Sep 2014)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003 OS X Mavericks 10.9.4 and Security Update 2014-003 are now available and address the following: Certificate Trust Policy Available for: OS X Lion v10.7.5, OS X Lion Server v10.7....
CVE-2014-1317
CVE-2014-1317 affects iBooks Commerce in OS X pre-10.9.4; Apple ID credentials are written to the iBooks log, enabling local users to read sensitive data. Apple’s security content fixes this by disallowing credential logging, and OS X 10.9.4 (and Security Update 2014-003) include the remediation.
Netcat 1.10 - NT Stack Buffer Overflow
No description provided by source. $Id: netcat110nt.rb 9587 2010-06-22 23:57:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2012-1317
The CVE-2012-1317 entry affects Cisco IOS multicast handling. Affected: Cisco IOS before 15.1(1)SY. Vulnerability: multicast processing can be abused by remote attackers sending high-rate packets, causing a denial of service via Route Processor crash (Bug ID CSCts37717). There is no exploitation ...
Microsoft Windows symbolic link table Privilege Escalation - Ver2 (CVE-1999-1317)
A privilege escalation vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
CVE-2013-1317
CVE-2013-1317 describes an integer overflow in Microsoft Publisher 2003 SP3 that allows remote code execution when a user opens a specially crafted Publisher file, caused by an improper allocation-size calculation. Public references note multiple related Publisher vulnerabilities (2830397 family)...
MS13-042: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2830397)
The Publisher component of Microsoft Office installed on the remote host is affected by multiple vulnerabilities : - The application has a negative value allocation vulnerability. CVE-2013-1316 - The application has an integer overflow vulnerability. CVE-2013-1317 - The application has a corrupt...
Microsoft Office Publisher Remote Code Execution Vulnerability (2830397)
This host is missing an important security update according to Microsoft Bulletin MS13-042. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CentOS Update for cyrus-imapd CESA-2011:1317 centos4 x86_64
Check for the Version of cyrus-imapd OpenVAS Vulnerability Test CentOS Update for cyrus-imapd CESA-2011:1317 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CentOS Update for cyrus-imapd CESA-2011:1317 centos4 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for cyrus-imapd CESA-2011:1317 centos5 i386
Check for the Version of cyrus-imapd OpenVAS Vulnerability Test CentOS Update for cyrus-imapd CESA-2011:1317 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CVE-2011-1317
CVE-2011-1317 affects IBM WebSphere Application Server (WAS) JSP component WASJSPStrBufferImpl, where a memory leak can be triggered by large JSP responses. Affects WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15. Exploitation could lead to denial of service via memory consumption by sending ...
CVE-2004-1317
creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16436 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/netcat110nt.rb 2025-02-06 03:13:38+00:00| seen|...
Netcat 1.10 - NT Stack Buffer Overflow (Metasploit)
$Id: netcat110nt.rb 9587 2010-06-22 23:57:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2010-1317
RealNetworks Helix Server NTLM Authentication vulnerability (CVE-2010-1317) exists in the Base64 NTLM handling of the administrative web interface. The flaw arises when an invalid Base64 string is provided in the Authorization header, where a length derived from the failed decoding is used in a c...
RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities
According to its banner, the remote host is running version 11.x, 12.x, or 13.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities : - A heap overflow exists in the NTLM authentication code related to invalid Base64 encoding...
Netcat v1.10 NT Stack Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netcat v1.10...
CVE-2009-1317
Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 userSID cookie parameter to droplets/functions/base.php and the 2 username parameter to admin/index.php...